Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-80462

Privilege Escalation in Progress Chef Automate

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Chef Automate

Default version status: unaffected

  • 4.13.516 to < 4.13.520affected
  • 1.0.0 to < 4.13.516unaffected

References